EP1061447A2 - Partitionierung und Überwachung von softwaregesteuerten Systemen - Google Patents
Partitionierung und Überwachung von softwaregesteuerten Systemen Download PDFInfo
- Publication number
- EP1061447A2 EP1061447A2 EP00109776A EP00109776A EP1061447A2 EP 1061447 A2 EP1061447 A2 EP 1061447A2 EP 00109776 A EP00109776 A EP 00109776A EP 00109776 A EP00109776 A EP 00109776A EP 1061447 A2 EP1061447 A2 EP 1061447A2
- Authority
- EP
- European Patent Office
- Prior art keywords
- module
- memory
- monitoring
- program
- monitoring unit
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Withdrawn
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
- G06F11/0703—Error or fault processing not based on redundancy, i.e. by taking additional measures to deal with the error or fault not making use of redundancy in operation, in hardware, or in data representation
- G06F11/0751—Error or fault detection not based on redundancy
- G06F11/0754—Error or fault detection not based on redundancy by exceeding limits
- G06F11/076—Error or fault detection not based on redundancy by exceeding limits by exceeding a count or rate limit, e.g. word- or bit count limit
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
- G06F11/0703—Error or fault processing not based on redundancy, i.e. by taking additional measures to deal with the error or fault not making use of redundancy in operation, in hardware, or in data representation
- G06F11/0751—Error or fault detection not based on redundancy
- G06F11/0754—Error or fault detection not based on redundancy by exceeding limits
- G06F11/0757—Error or fault detection not based on redundancy by exceeding limits by exceeding a time limit, i.e. time-out, e.g. watchdogs
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F12/00—Accessing, addressing or allocating within memory systems or architectures
- G06F12/14—Protection against unauthorised use of memory or access to memory
- G06F12/1416—Protection against unauthorised use of memory or access to memory by checking the object accessibility, e.g. type of access defined by the memory independently of subject rights
- G06F12/1425—Protection against unauthorised use of memory or access to memory by checking the object accessibility, e.g. type of access defined by the memory independently of subject rights the protection being physical, e.g. cell, word, block
- G06F12/1441—Protection against unauthorised use of memory or access to memory by checking the object accessibility, e.g. type of access defined by the memory independently of subject rights the protection being physical, e.g. cell, word, block for a range
Definitions
- the invention relates to a method according to the preamble of the independent claim. Flexibility, performance and costs mean that more and more processes are using controlled by software-controlled electronics. This is usually the case electronics that are controlled with the help of microprocessors.
- the one presented here Invention is designed to increase the reliability of these systems and at the same time reduce the effort for their development. For this is processor monitoring provided that ensures a robust partitioning. It controls memory access and compliance with times when processing program sections and - modules.
- Processes known in the prior art are implemented by flexible, generally software-based Electronics controlled.
- the advantage of these controls is that they are related to the regulation and control offer extremely high performance. Your basically always the same Basic structure consisting of sensors, digital processor-controlled information processing and actuators can be applied to almost all processes, even if they are very complicated are to be treated.
- the actual processing part takes over the specific adaptation to the respective process. It is usually done with the help of control software, that is able to control complex processes.
- Complex processes require on the part the software extensive and in many cases also complex software structures. they are designed to respond to different process conditions, times adhere and have sufficient reaction alternatives ready. The more complex applications and software become, the more difficult it is to create error-free software.
- Error-free is a requirement that is particularly relevant for corresponding electronics in safety-related Applications matter. Long development times with extensive and lengthy test phases cause high costs. The disadvantage is that even after termination of all tests no one hundred percent certainty that the software can be guaranteed does not yet contain hidden bugs. Hidden mistakes are the rule, not the one Exception. Another disadvantage is that the effects of hidden errors cannot be predicted are.
- the object according to the invention is therefore to prevent the uncontrolled spread of software errors to prevent and within a microprocessor the process completely independent To enable processes or program modules.
- the invention builds on the fact that small units can be better controlled as great.
- the complexity of small units is limited, which makes it easier to understand and transparency.
- Small units have fewer states and are therefore with fewer Testing effort. However, this only applies if they do not negatively influence each other.
- the logic behind it says that the sum of the possible states individual units is less than the combination of all states. If you look at for example a system consisting of four units, each with four independent states, so you get 16 test cases. would the conditions be interdependent or could they influence each other if 256 test cases were obtained. So it's advantageously complex Divide processes into small independent modules.
- a monitoring unit and an allocation table becomes a partitioning of storage units performed.
- the entire process is broken down into individual programs divided smaller modules. These modules are themselves independent programs or Subroutines.
- Each individual module becomes a predetermined, fixed memory area or address space assigned.
- the allocation of the memory space or the address space is done using an allocation table.
- previously determined memory limits are used or address limits to which the respective program module must have access in an assignment table.
- Fixed storage means that the In contrast to the prior art, memory limits cannot be variably set and not through the running programs such as Communication software changed can be.
- Each Module can therefore read all information of the overall process, but can only within make changes to the assigned areas with write authorization. Under the fixed storage of memory limits in a hardware allocation table and under the fixed allocation of these memory areas to individual authorized program modules the robust partitioning according to the invention is understood below.
- the invention also includes a control of the temporal independence of the individual program modules. This applies in particular to deterministic processes. This time partitioning is also carried out using the assignment table, in which the time specifications are stored. This means that the time monitoring cannot be influenced by the running program even in the event of an error. If a program consists of several modules and a result should be guaranteed to be made available after a specified time, then it must be ensured that all program modules with their processing times adhere to specified time specifications. State of the art is that a programmer makes time estimates and, if necessary, verifies them with the help of tests. If a module is part of a processing chain and does not meet the specified time conditions, the overall control may fail.
- a well-known rough aid is a watchdog, which in the event that a program is totally suspended ", triggers a restart. This can be done with PCs and non-safety-related systems, but it is not acceptable with systems that control, for example, the steering or braking of a vehicle
- Individual program modules are assigned fixed time contingents in addition to the memory areas.
- a violation of the specifications corresponds to a violation of the specification and should not occur.
- the error can be caused by the monitoring unit, which ensures compliance with the time specifications as specified for the individual program modules
- the diagnosis table is also always able to be uniquely assigned to a specific program module via the assignment table in an analogous manner to monitoring the memory limits. The corresponding program module is terminated and thus has an effect on the overall time system behavior prevented.
- the monitoring unit can always be uniquely assigned in which Program module an error has occurred and which memory limit has been violated. This Limits errors in the processing of a technical task to the area of a program module and makes an uncontrolled spread of the error impossible.
- Another advantage of the invention is that complex communication software, as in State of the art for memory management and address management as well as for communication individual program modules must be implemented on distributed systems, does not have to be set up.
- the communication channels and the memory areas are in the Determined in advance in the allocation table so that the communication software is not required can.
- the application programs thus get by with less code, so the application even so has enormous speed advantages.
- Excellent application The invention is therefore the use in real-time systems such as e.g. in motor vehicles in electronic stability systems or electronically controlled braking systems and the like are used. Other applications are e.g. for electronics for control an aircraft cabin.
- Another advantageous embodiment of the invention is the termination of a program module to be connected to an emergency program which is the following program modules provides a result with which they can continue to work in such a way that the Overall electronics performance is reduced, but their reliability is maintained remains.
- the interrupt known per se is stored with an interrupt service routine. As soon as the interrupt is called, the interrupt service routine is started and on emergency program appropriate to the fault situation started.
- the monitoring limits of the Memory automatically generated by a known linker and according to the invention in stored in the allocation table of the monitoring unit.
- the individual program modules first in a manner known per se with a linker to an executable Program connected.
- the memory data are also logged in a monitoring memory and creates the so-called linker list. If the test runs are error-free Program sequence, the memory limits can be taken from the linker list and be transferred to the assignment table.
- each program module entered two times in the allocation table there are at least one for each program module entered two times in the allocation table.
- a larger number of Monitoring times per module must be entered in the allocation table.
- the overrun A first monitoring time, for example, cancels the running program module.
- the second later time is used, for example, to monitor the orderly Start of the emergency program stored in the interrupt routine, and ensures in this way that no errors can creep in even through the emergency program.
- the robust partitioning according to the invention is set in an advantageous embodiment from the basic functions of memory partitioning and time partitioning together.
- Memory partitioning is an essential element of the invention and in Fig. 1 shown as a block table.
- the time partitioning is shown in Fig. 1 as a flow chart.
- Different program modules module 1, module 2 to module n share processor, ROM, RAM and I / O.
- n For the number of program modules there are according to the invention no restrictions. This should be illustrated by the variable n.
- the number of program modules is limited by the physical size of the memory area 2 and by the physical size of the system boundaries, the general are designated by the number 1.
- the individual program modules module 1, module 2 to Module n are robustly partitioned, i.e.
- module 1, module 2, module n are assigned fixed memory areas, which is also referred to in the graphic representation as module 1, module 2, module n are.
- the individual memory areas are due to mentally impermeable memory limits 3 separated. Shown as walls in the graph.
- Each memory area module 1, module 2 to module n is also assigned a partitioned program module.
- the impermeable storage areas 3 separate the individual program modules.
- the memory limits do not act as access barriers to the system resources processor, RAM, ROM, I / O.
- the individual program modules have access to these system resources.
- the time partitioning is done with the time monitoring module that each program module 1, module 2 to module n provides a time TIME 1, TIME 2 to TIME n.
- the system starts when the electronics and programs are initialized Memory monitoring and time monitoring initialized. Exceeds a program module the time made available to him, this program module is used by the Time monitoring canceled. Only the program module whose Time was exceeded. The remaining program modules continue to work. This is through the recursive arrow labeled Loop.
- the monitoring unit 4 is as separate hardware-based part.
- the monitoring unit 4 with the basic function Memory monitoring and the basic function time monitoring are connected with a processor, ROM (Read Only Memory) and RAM (Read and Access Memory).
- the memory monitoring learns which operations via the status access R / W the processor tries to execute.
- the memory monitor Assignment table 5 which is described in more detail in FIG. 3, gives the monitoring unit 4 the resources ROM or RAM for the processor according to those in the allocation table 5 set permissions free.
- the monitoring unit 4 via a write enable access WE and a read enable access RE to the resource RAM as well as a program Storage Enable access PSNE to the resource ROM.
- the monitoring unit 4 also has access to the address bus and the data Bus. With the access via the address bus, the monitoring unit 4 checks that of the Processor used address ranges according to the assignment table 5. The review is done by comparing the currently active program module on the address bus used addresses, with the addresses stored in the allocation table 5, for the active program module are allowed. The active program module uses addresses that are not approved for the program module, the monitoring unit 4 diagnoses an error that is registered and clearly assigned to the active program module that caused the address violation error. To be able to decide Which program module is active in each case is provided by the monitoring unit 4 Access to the data bus.
- the monitoring unit 4 uses the data bus to check which one Program module is activated in the processor and linked to the respectively active program module the associated row of the allocation table 5 according to the specified one Linking rule.
- a linking rule is shown graphically in FIG. 3. If an address is outside of one of the ranges specified in the assignment table, then the memory monitor gives an error signal to the time monitor.
- the time monitoring is connected to the processor via a so-called Non Mascable Interrupt NMI and can use this access to the program flow of the program module that the address violation triggered, stop. Other connections exist in a manner known per se between the processor and the resource ROM and between the processor and the Resource RAM.
- FIG. 3 shows a graphical representation of an allocation table stored in the monitoring unit 4 5 as well as a linking rule for the individual program modules the rows of the assignment table.
- Each program module module 1, module 2 to module n A line is assigned to the allocation table 5, symbolized in FIG. 3 by the pointer 6.
- the assigned module-oriented are for the respective program modules Storage limits Upper Limit 1, Upper Limit 2 to Upper Limit n, and Lower Limit 1, Lower Limit 2 to Lower Limit n and the assigned module-oriented processing times t1, t2 to tn entered.
- the columns of the allocation table 5 are the system resources ROM, RAM, I / O, TIME assigned.
- Each program module module 1, module 2 to module n can have individual memory limits for each system resource ROM, RAM, I / O, TIME and times are assigned.
- the entry of the memory limits and times in The allocation table 5 is advantageously carried out off-line, that is, before the program starts.
- Crucial is that the entries have guaranteed protection so that they are protected by an ongoing Program module can no longer be changed. This can be done if necessary also achieve that the list during the initialization phase of a program is loaded and then by a security bit the access of the running program is withdrawn. This backup bit is only activated by a processor reset reset.
- Storage limits can be found in the information of a linker the execution times (t1, t2 to tn) must be specified by the program developer. They are entered in allocation table 5 as shown in. Every program module (Module 1, module 2 to module n) is addressed when it is called in the processor the assigned row in the assignment table 5 and thus activates an individual Monitoring mechanism. If a program module (e.g. module 1) is used by another Program module (e.g. module 2) is interrupted, the current pointer 6 is not in one However, the monitoring stack known to the person skilled in the art is deposited. A new pointer 6 activates a corresponding new row of the allocation table 5, which is effective as long as how the assigned module is processed. Upon completion, the original one Pointer 6 reloaded from the monitoring stack and activated. The timing of the Program modules is cyclical, which is represented by the arrow labeled Loop is.
- the allocation table contains 5 module-oriented times (t1, t2 to tn). For example, when you call a program module, you will be in time monitoring loaded and counted down. The program module ends its processing before If the value zero is reached, the program module works correctly. If zero is reached, lies an error before, an interrupt is initiated, which in turn is sent by the programmer with a corresponding service is to be connected. Logging is also advantageous in this case of the event and the initiation of an adequate emergency program that the interrupt is stored as an interrupt service.
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Quality & Reliability (AREA)
- Computer Security & Cryptography (AREA)
- Debugging And Monitoring (AREA)
- Storage Device Security (AREA)
Abstract
Description
- Fig. 1
- Eine graphische Darstellung der Grundfunktionen der erfindungsgemäßen Partitionierung, dargestellt sind eine Speicherpartitionierung sowie eine Zeitpartitionierung.
- Fig. 2
- Ein Blockschaltbild einer erfindungsgemäßen Ausführungsform für eine beispielhafte Elektronikumgebung
- Fig. 3
- Eine graphische Darstellung der erfindungsgemäßen Zuweisungstabelle und deren Zuordnung zu den einzelnen partitionierten Programm-Modulen mittels Zeiger
Claims (6)
- Verfahren zur Partitionierung und Überwachung einer softwaregesteuerten Elektronik (1) aus einem Prozessor, mindestens einem Lesespeicher (ROM), mindestens einem Schreib-und Lesespeicher (RAM) und einer Überwachungseinheit (4),
dadurch gekennzeichnet,
daß die Überwachungseinheit (4) mittels einer fest abgelegten Zuweisungstabelle (5) die Speicher (ROM, RAM) in einzelne Speicherbereiche (Modul 1, Modul 2 bis Modul n) unterteilt und diese fest durch ein laufendes Programm-Modul auch im Fehlerfall nicht beeinflußbar einzelnen Programm-Modulen zuordnet. - Verfahren nach Anspruch 1, dadurch gekennzeichet, daß die Überwachungseinheit (4) mittels Zeitüberwachung und Zuweisungstabelle (5) die Verarbeitungszeiten (t1, t2 bis tn) der einzelnen Programm-Module überwacht und daß die Zeitüberwachung durch das laufende Programm-Modul auch im Fehlerfall nicht beeinflußt werden kann.
- Verfahren nach Anspruch 1 oder Anspruch 2, dadurch gekennzeichnet, daß die Überwachungseinheit (4) bei Verletzung einer in der Zuweisungstabelle fest abgelegten Speichergrenzen ( Upper Limit 1, Upper Limit 2 bis Upper Limit n, Lower Limit 1, Lower Limit 2 bis Lower Limit n) oder Verletzung einer der Zeitvorgaben (t1,t2 bis tn) die Verletzung protokolliert und das die Verletzung verursachende Programm-Modul mit einem Interrupt abbricht.
- Verfahren nach Anspruch 3, dadurch gekennzeichnet, daß der Interrupt mit einer Interrupt-Service-Routine hinterlegt ist.
- Verfahren nach einem der Ansprüche 1 bis 4, dadurch gekennzeichnet, daß die Speichergrenzen (Upper Limit 1, Upper Limit 2 bis Upper Limit n, Lower Limit 1, Lower Limit 2 bis Lower Limit n) mittels eines Linkers festgelegt werden.
- Verfahren nach einem der Ansprüche 2 bis 5, dadurch gekennzeichnet, daß für jedes Programm-Modul mindestens zwei Zeiten in der Zuweisungstabelle (5) eingetragen sind.
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
DE19927657 | 1999-06-17 | ||
DE19927657A DE19927657A1 (de) | 1999-06-17 | 1999-06-17 | Partitionierung und Überwachung von softwaregesteuerten Systemen |
Publications (2)
Publication Number | Publication Date |
---|---|
EP1061447A2 true EP1061447A2 (de) | 2000-12-20 |
EP1061447A3 EP1061447A3 (de) | 2002-05-15 |
Family
ID=7911561
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
EP00109776A Withdrawn EP1061447A3 (de) | 1999-06-17 | 2000-05-09 | Partitionierung und Überwachung von softwaregesteuerten Systemen |
Country Status (4)
Country | Link |
---|---|
US (1) | US6470430B1 (de) |
EP (1) | EP1061447A3 (de) |
JP (1) | JP2001014220A (de) |
DE (1) | DE19927657A1 (de) |
Cited By (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
GB2365597B (en) * | 2000-03-09 | 2004-09-15 | Smiths Group Plc | Processing systems |
US7065627B2 (en) | 2002-03-25 | 2006-06-20 | International Business Machines Corporation | Method and system for providing an event driven image for a boot record |
US7200824B1 (en) * | 2004-11-16 | 2007-04-03 | Altera Corporation | Performance/power mapping of a die |
US7937538B2 (en) | 2002-11-22 | 2011-05-03 | Qst Holdings, Llc | External memory controller node |
CN109800126A (zh) * | 2018-12-27 | 2019-05-24 | 北京奇安信科技有限公司 | 补丁安装失败的分析方法及装置 |
Families Citing this family (15)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6697971B1 (en) * | 2000-10-24 | 2004-02-24 | Hewlett-Packard Development Company, L.P. | System and method for detecting attempts to access data residing outside of allocated memory |
DE10206865C1 (de) * | 2002-02-18 | 2003-05-15 | Daimler Chrysler Ag | Reaktionszeit-Beschränkung eines Software-Prozesses |
DE10349200A1 (de) * | 2003-10-23 | 2005-05-25 | Daimlerchrysler Ag | System und Verfahren zur Überwachung und Verwaltung prozessinterner Speicher einer Prozessausführungseinheit |
US20050283770A1 (en) * | 2004-06-18 | 2005-12-22 | Karp Alan H | Detecting memory address bounds violations |
DE102005052971A1 (de) * | 2005-11-07 | 2007-05-10 | Siemens Ag | Datenverarbeitungsvorrichtung und Verfahren zum Betrieb |
US7983711B2 (en) * | 2006-08-24 | 2011-07-19 | Kyocera Corporation | Software architecture for dual mode phone and method of use |
DE102008018680A1 (de) * | 2007-12-18 | 2009-07-02 | Siemens Aktiengesellschaft | Verfahren zum Unterstützen eines sicherheitsgerichteten Systems |
DE102008051391A1 (de) | 2008-10-11 | 2009-06-10 | Daimler Ag | Verfahren zum Verwalten eines nichtflüchtigen, wiederbeschreibbaren Speichers |
DE102008051390A1 (de) | 2008-10-11 | 2009-06-10 | Daimler Ag | Verfahren und Vorrichtung zum Betrieb eines Mikrorechners |
JP5297833B2 (ja) * | 2009-02-17 | 2013-09-25 | ルネサスエレクトロニクス株式会社 | ウォッチドッグタイマとその制御方法 |
CN101788947B (zh) * | 2010-02-09 | 2012-10-17 | 华为技术有限公司 | ***总线的监测方法、***总线监测器及片上*** |
CN102781804B (zh) | 2010-03-12 | 2014-09-17 | 三菱电机株式会社 | 电梯安全控制装置 |
JP5543949B2 (ja) * | 2011-09-21 | 2014-07-09 | 株式会社東芝 | 制御装置およびモニタプログラム |
DE102011089563A1 (de) * | 2011-12-22 | 2013-06-27 | Conti Temic Microelectronic Gmbh | Verfahren zum Generieren von Software |
CN112115017B (zh) * | 2020-08-07 | 2022-07-12 | 航天科工空间工程发展有限公司 | 一种星载软件程序的逻辑代码监控方法和装置 |
Citations (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5325521A (en) * | 1990-02-26 | 1994-06-28 | Mitsubishi Denki Kabushiki Kaisha | Wait control device |
Family Cites Families (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5463745A (en) * | 1993-12-22 | 1995-10-31 | Intel Corporation | Methods and apparatus for determining the next instruction pointer in an out-of-order execution computer system |
US5727178A (en) * | 1995-08-23 | 1998-03-10 | Microsoft Corporation | System and method for reducing stack physical memory requirements in a multitasking operating system |
US6052753A (en) * | 1997-01-21 | 2000-04-18 | Alliedsignal Inc. | Fault tolerant data bus |
US6292899B1 (en) * | 1998-09-23 | 2001-09-18 | Mcbride Randall C. | Volatile key apparatus for safeguarding confidential data stored in a computer system memory |
US20010037450A1 (en) * | 2000-03-02 | 2001-11-01 | Metlitski Evgueny A. | System and method for process protection |
-
1999
- 1999-06-17 DE DE19927657A patent/DE19927657A1/de not_active Withdrawn
-
2000
- 2000-05-09 EP EP00109776A patent/EP1061447A3/de not_active Withdrawn
- 2000-06-16 JP JP2000182161A patent/JP2001014220A/ja active Pending
- 2000-06-16 US US09/596,084 patent/US6470430B1/en not_active Expired - Lifetime
Patent Citations (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5325521A (en) * | 1990-02-26 | 1994-06-28 | Mitsubishi Denki Kabushiki Kaisha | Wait control device |
Non-Patent Citations (2)
Title |
---|
HILL T ET AL: "MIKROCOMPUTER IN KFZ-ANWENDUNGEN" ELEKTRONIK, FRANZIS VERLAG GMBH. MUNCHEN, DE, Bd. 38, Nr. 4, 17. Februar 1989 (1989-02-17), Seiten 48-51,54-56, XP000212715 ISSN: 0013-5658 * |
NOORE A ET AL: "DETECTING AND MASKING TRANSIENT FAILURES IN COMPUTERS USED FOR COAL MINING OPERATIONS" IEEE TRANSACTIONS ON INDUSTRY APPLICATIONS, IEEE INC. NEW YORK, US, Bd. 28, Nr. 1, 1992, Seiten 186-189, XP000297282 ISSN: 0093-9994 * |
Cited By (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
GB2365597B (en) * | 2000-03-09 | 2004-09-15 | Smiths Group Plc | Processing systems |
US7065627B2 (en) | 2002-03-25 | 2006-06-20 | International Business Machines Corporation | Method and system for providing an event driven image for a boot record |
US7937538B2 (en) | 2002-11-22 | 2011-05-03 | Qst Holdings, Llc | External memory controller node |
US7200824B1 (en) * | 2004-11-16 | 2007-04-03 | Altera Corporation | Performance/power mapping of a die |
CN109800126A (zh) * | 2018-12-27 | 2019-05-24 | 北京奇安信科技有限公司 | 补丁安装失败的分析方法及装置 |
Also Published As
Publication number | Publication date |
---|---|
US6470430B1 (en) | 2002-10-22 |
JP2001014220A (ja) | 2001-01-19 |
DE19927657A1 (de) | 2001-01-04 |
EP1061447A3 (de) | 2002-05-15 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
EP1061447A2 (de) | Partitionierung und Überwachung von softwaregesteuerten Systemen | |
DE3048365C2 (de) | ||
EP0011685B1 (de) | Programmierbare Speicherschutzeinrichtung für Mikroprozessorsysteme und Schaltungsanordnung mit einer derartigen Einrichtung | |
DE102014201682A1 (de) | Verfahren zur Koexistenz von Software mit verschiedenen Sicherheitsstufen in einem Multicore-Prozessorsystem | |
DE19509150C2 (de) | Verfahren zum Steuern und Regeln von Fahrzeug-Bremsanlagen sowie Fahrzeug-Bremsanlage | |
EP2907072A1 (de) | Verfahren zur steuerung eines getrennten ablaufs von verknüpften programmblöcken und steuergerät | |
EP2099667A1 (de) | Verfahren zum sicherstellen oder aufrechterhalten der funktion eines komplexen sicherheitskritischen gesamtsystems | |
EP3983897B1 (de) | Verfahren zum sicherstellen und aufrechterhalten der funktion eines sicherheitskritischen gesamtsystems | |
EP3566398B1 (de) | Verfahren und halbleiterschaltkreis zum schützen eines betriebssystems eines sicherheitssystems eines fahrzeugs | |
DE102013021231A1 (de) | Verfahren zum Betrieb eines Assistenzsystems eines Fahrzeugs und Fahrzeugsteuergerät | |
DE102010039021A1 (de) | Verfahren zur Rekonfiguration von Softwareparametern in einem Mikrocontroller sowie Mikrocontroller und Steuergerät | |
DE10208866A1 (de) | Einrichtung und Verfahren zur Beurteilung und Erzielung von Sicherheit bei Systemen sowie entsprechendes Computerprogramm | |
WO2006136189A1 (de) | Verfahren und vorrichtung zum überwachen eines unerlaubten speicherzugriffs einer rechenvorrichtung, insbesondere in einem kraftfahrzeug | |
EP3483033A1 (de) | Verfahren und onboard-steuereinheit zum steuern und/oder überwachen von komponenten eines schienenfahrzeugs | |
WO1999017192A1 (de) | Konfigurierungsverfahren für datenverarbeitungsanlagen | |
DE69801100T2 (de) | Verfahren und vorrichtung zur bearbeitung einer vielzahl von technischen anwendungen mit jeweils eigener sicherheit | |
DE102021202935A1 (de) | Verfahren und Vorrichtung zum Steuern einer Fahrfunktion | |
WO2008128710A1 (de) | Steuervorrichtung für fahrzeuge | |
EP0547259A1 (de) | Schaltungsanordnung zum Sichern des Betriebes eines rechnergesteuerten Gerätes | |
DE102006054705A1 (de) | Verfahren zum Betreiben einer Recheneinheit | |
EP3779619A1 (de) | Emergente risiken eines technischen systems | |
DE102017212560A1 (de) | Verfahren zum ausfallsicheren Durchführen einer sicherheitsgerichteten Funktion | |
EP3893113B1 (de) | Überwachung einer komponente eines steuerungssystems für ein fortbewegungsmittel | |
DE102021120596A1 (de) | Verfahren zur Übergabe von mindestens einem Parameterwert eines ersten Simulationsmodells an ein zweites Simulationsmodell während einer Simulation | |
DE10128996B4 (de) | Verfahren und Vorrichtung zur Überwachung von Speicherzellen eines flüchtigen Datenspeichers |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PUAI | Public reference made under article 153(3) epc to a published international application that has entered the european phase |
Free format text: ORIGINAL CODE: 0009012 |
|
17P | Request for examination filed |
Effective date: 20000509 |
|
AK | Designated contracting states |
Kind code of ref document: A2 Designated state(s): AT BE CH CY DE DK ES FI FR GB GR IE IT LI LU MC NL PT SE |
|
AX | Request for extension of the european patent |
Free format text: AL;LT;LV;MK;RO;SI |
|
PUAL | Search report despatched |
Free format text: ORIGINAL CODE: 0009013 |
|
AK | Designated contracting states |
Kind code of ref document: A3 Designated state(s): AT BE CH CY DE DK ES FI FR GB GR IE IT LI LU MC NL PT SE |
|
AX | Request for extension of the european patent |
Free format text: AL;LT;LV;MK;RO;SI |
|
17Q | First examination report despatched |
Effective date: 20021105 |
|
AKX | Designation fees paid |
Designated state(s): AT BE CH CY DE DK ES FI FR GB GR IE IT LI LU MC NL PT SE |
|
17Q | First examination report despatched |
Effective date: 20021105 |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: THE APPLICATION HAS BEEN WITHDRAWN |
|
18W | Application withdrawn |
Effective date: 20061018 |